Google Plus Media-Insert - Google Domains API - 403 Forbidden

Question

I am trying to upload an image to Google+ using Javascript/JQuery; I have an access token which I can use to authenticate POST requests successfully but I get the following response when I attempt to use G+ Media Insert (https://developers.google.com/+/domains/api/media/insert):

{
 "error": {
  "errors": [
   {
    "domain": "global",
    "reason": "forbidden",
    "message": "Forbidden"
   }
  ],
  "code": 403,
  "message": "Forbidden"
 }
}

I haven't configured Domain-wide delegation because I expect the user to sign in to generate the access token (is this perhaps the issue?). I have enabled the Google+ Domains API in the Developer console and the relevant scopes are in place but I can't figure out why I receive a 403 error. The following AJAX request is being used:

var postForm = new FormData();
postForm.append("source",[code which generated a blob]);
postForm.append("displayName", "TestUpload");

$.ajax({
    url: "https://www.googleapis.com/upload/plusDomains/v1/people/me/media/cloud",
    headers: {"Authorization": "Bearer " + acToken},
    type:"POST",
    uploadType: "multipart/related",
    processData:false,
    contentType:false,
    cache:false,
    data: postForm,
});

Any help would be appreciated, I can provide more information if needed.

PS: I am actually using a userID instead of me in the URL for the moment

Joanna Joanna · Accepted Answer · 2014-03-10T20:45:18

First, make sure that the userID belongs to the user that you have authenticated (perhaps through this OAuth flow). Unlike methods such as people.get, this method requires authentication, and cannot be called solely with an ID, unless that ID is the currently authenticated user. This is why we recommend using the special value me to avoid confusion.

Second, you need to be certain that the user that is authenticated is a Google Apps user. For example, if the user is a GMail user, the request will get a 403, since the Google+ Domains API is not allowed for non-Domains accounts.

Google Plus Media-Insert - Google Domains API - 403 Forbidden

1 Answers